feat: security - gnupg & openssh's KDF

2026-04-29 04:07:02 +02:00 · 2024-01-26 12:38:13 +08:00
parent ec5ef05983
commit ecc335b07e
12 changed files with 155 additions and 25 deletions
--- a/modules/nixos/server.nix
+++ b/modules/nixos/server.nix
@@ -1,6 +0,0 @@
-{
-  imports = [
-    ./base
-    ../base.nix
-  ];
-}
--- a/modules/nixos/server/proxmox-hardware-configuration.nix
+++ b/modules/nixos/server/proxmox-hardware-configuration.nix
--- a/modules/nixos/server/security.nix
+++ b/modules/nixos/server/security.nix
@@ -0,0 +1,7 @@
+{username, ...}: {
+  # Public Keys that can be used to login to all my servers.
+  users.users.${username}.openssh.authorizedKeys.keys = [
+    # TODO update keys here
+    "ssh-ed25519 xxx ryan@romantic"
+  ];
+}
--- a/modules/nixos/server/server-riscv64.nix
+++ b/modules/nixos/server/server-riscv64.nix
@@ -4,11 +4,13 @@
  # =========================================================================

  imports = [
-    ./base/i18n.nix
-    ./base/misc.nix
-    ./base/user-group.nix
+    ../base/i18n.nix
+    ../base/misc.nix
+    ../base/user-group.nix

-    ../base.nix
+    ../../base.nix
+    
+    ./security.nix
  ];

  # List packages installed in system profile. To search, run:
--- a/modules/nixos/server/server.nix
+++ b/modules/nixos/server/server.nix
@@ -0,0 +1,8 @@
+{
+  imports = [
+    ../base
+    ../../base.nix
+
+    ./security.nix
+  ];
+}